General

  • Target

    31e88e44ca4b5c2b7248d95f57dcbf86

  • Size

    562KB

  • MD5

    31e88e44ca4b5c2b7248d95f57dcbf86

  • SHA1

    9a0719c4f11bceeca3123408e7d5b7d026feb634

  • SHA256

    e88419656dc2a28f765633ce79f6b9823aa2e54ba7181f466577c7988ee5b83c

  • SHA512

    b29d649674cdce9461f11def701a29834887e8e506d46ba053e00ddde495af84b8230851af401c14eb843b29b4c913158ea5d682a3bd927716759eb8bb6ec0ab

  • SSDEEP

    12288:38Malpp/QPcqcGVwwAPfoEQB94Uc1VNzZWPx9YBKmTdb:38dhQEqcGQfoxGVxIPAIOd

Malware Config

Extracted

Family

raccoon

Botnet

a4264de230d83457af728282177d0833fb7bd016

Attributes
  • url4cnc

    http://telemirror.top/ogaolittlebro2

    http://tgmirror.top/ogaolittlebro2

    http://telegatt.top/ogaolittlebro2

    http://telegka.top/ogaolittlebro2

    http://telegin.top/ogaolittlebro2

    https://t.me/ogaolittlebro2

rc4.plain
rc4.plain

Signatures

  • Raccoon Stealer V1 payload 1 IoCs
  • Raccoon family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 31e88e44ca4b5c2b7248d95f57dcbf86
    .exe windows:6 windows x86 arch:x86

    2f1bba23d3f31d886fd20c963bc55038


    Headers

    Imports

    Sections